VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Uživatelský manuál stáhnout pdf (Strana 19)

VMware, Inc. 19

AfterESXhostpreparationiscomplete,youcansecureinternalnetworksbyinstallingavShieldEdge.Ifyou

areinstallingvShieldEdgeinstancesonvDSportgroups,youcanisolatethoseportgroupsbyenablingPort

GroupIsolationoneachvDS.

Thischapterincludesthefollowingtopics:

 “EnablingPortGroupIsolation”onpage 19

 “InstallingavShieldEdge”onpage 21

Enabling Port Group Isolation

PortGroupIsolationcreatesabarrierbetweenthevirtualmachinesprotectedbyavShieldEdgeandthe

externalnetwork.WhenyouenablePortGroupIsolationandinstallavShieldEdgeonavDSportgroup,you

isolateeachsecuredvDSportgroupfromtheexternalnetwork.WhenPortGroupIsolationis

enabled,traffic

isnotallowedaccesstothevirtualmachinesinthesecuredportgroupunlessNATrulesorVLANtagsare

configured

To enable Port Group Isolation on a vDS

1EnablePortGroupIsolationoneachvDS.

2InstallavShieldEdgeoneachvDSportgroupyouplantosecure.

3MovethevirtualmachinestosecuredvDSport

groups.

vNetwork Preparation and vShield

Edge Installation

IMPORTANTIfyouintendtousethePortGroupIsolationfeature,youshouldinstallPortGroupIsolationon

allESXhostsinyourvCenterenvironmentbeforeyouinstallanyvShieldEdgevirtualmachines.Ifyoudonot

installPortGroupIsolationandattempttoenablethefeatureduringvShieldEdgeinstallation,

PortGroup

Isolationdoesnotwork.See“InstallvShieldApp,vShieldEndpoint,andPortGroupIsolationServicesonan

ESXHost”onpage 15.

MPORTANTAllvShieldRESTrequestsrequireauthorization.Youcanusethefollowingbasicauthorization:

Authorization: Basic YWRtaW46ZGVmYXVsdA==

YWRtaW46ZGVmYXVsdA==representstheBase64encodingofthevShieldManagerdefaultlogincredentials

(admin:default).

NOTEPortGroupIsolationisanoptionalfeaturethatisnotrequiredforvShieldEdgeoperation.PortGroup

IsolationisavailableforvDS‐basedvShieldEdgeinstallationsonly.

1 2 ... 14 15 16 17 18 19 20 21 22 23 24 ... 89 90

Žádné komentáře

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Uživatelský manuál Strana 19